On Fri, 7 Aug 2009, Paul Heinlein wrote:
In the past, I'd have tried to craft the iptables rules by hand. Now, older and lazier, I rely on shorewall.
This is a +1 for shorewall, which is 42 times simpler [*] than doing it by hand.
Steve
[*] Actually, it's more than 42, but 42 is The Answer.